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Examiner 
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Applicant(s) 

CHAUHAN ET AL. 
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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 17 December 2007 . 
2a)D This action is FINAL. 2b)IEI This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) KI Claim(s) 1-17 and 19-40 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) IEl Claim(s) 1-17 and 19-40 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)Q accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2.Q Certified copies of the priority documents have been received in Application No. . 



3.n Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
See the attached detailed Office action for a list of the certified copies not received. 
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1) □ Notice of References Cited (PTO-892) 

2) CD Notice of Draftsperson's Patent Drawing Review (PTO-948) 
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DETAILED ACTION 
Response to Amendment 

1. Applicant's amendment filed 17 December 2007 amends claims 1-3, 9, 11-12, 17, 25-28, 
32, 33, 35, and 36. Claim' 18 has been cancelled. Applicant's amendment has been fully 
considered and entered. 

Response to Arguments 

2. Applicant's arguments with respect to claims have been considered but are moot in view 
of the new ground(s) of rejection. 

Claim Objections 

3. Claims 19-21, 23, 24 are objected to because of the following informalities: The claims 
depend from a cancelled claim. Appropriate correction is required. 

Claim Rejections - 35 USC §101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

5. Claims 17, 19-24 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non- statutory subject matter. The claims are drawn to a system whose components 
are software only ([0093]). "Functional descriptive material consists of data structures and 
computer programs which impart functionality when employed as a computer component." 
(MPEP 2106). When functional descriptive material is recorded on some computer-readable 
medium it becomes structurally and functionally interrelated to the medium and will be statutory 
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in most cases since use of technology permits the function of the descriptive material to be 
realized. See Lowry, 32 F.3d at 1583-84, 32 USPQ2d at 1035. 

Claim Rejections - 35 USC §103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness under 35 
U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 

7. Claims 1-17, 19-40 are rejected under 35 U.S.C. 103(a) as being unpatentable over Xie, 
U.S. Patent No. 6,772,347, in view of Balasubramanian, U.S. Publication No. 2005/0086206, 
and further in view of Chelsa, U.S. Publication No. 2004/0250124. Referring to claims 1, 4, 6, 9, 
10, 14, 17, 22, 25, 26, 29, 31-34, 38, Xie discloses a computer network firewall wherein initially 
denied packets are additionally filtered dynamically (Col. 5, lines 45-50 & Figure 6). The 
packets are initially denied based on counter rules that increment the count until a threshold is 
exceeded (Col. 5, lines 10-15), which meets the limitation of receiving a first message, rejecting 
the first message based on a rejection rule. The dynamic filter, filters the initially denied packets 
using an additional set of rules, which are dynamically generated (Col. 5, lines 50-52), which 
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dynamically generated (Col. 5, lines 50-52), which meets the limitation of generating an 
exception rule to the rejection rule. The initially rejected packets, and later packets, can be 
allowed based on the newly generated rules used by the dynamic filter (Col. 5, lines 63-66), 
which meets the limitation of applying the exception rule to determine whether to allow the 
selected component, receiving a second message and allowing the second message to pass. Xie 
discloses filtering packets using rules based on port number and IP address (Col. 5, lines 58-60). 
The rules can be stored in a memory (CoL 4, lines 5-8), which meets the limitation of a trie 
structure, wherein each node in the trie is associated with a component. Xie does not specify 
filtering based on URLs and URL descendants. Balasubramanian discloses a rule based filtering 
system where URL requests are filtered at the domain and IP address level, based on rules, to 
allow/deny traffic for all domains beginning with identified IP address information ([0056] & 
[0065]-[0067]), which meets the limitation of maintaining a frequency for each instance of a 
URL component, wherein the frequency is a function of a number of occurances with which a 
URL component and its descendants were rejected by a rule, selecting a URL component 
according to a set of constraints, and generating an exception rule for the selected URL 
component and its descendants, the exception rule is generated by inferencing a scalar data type 
of the descendants of the selected URL component. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to dynamically filter the packets of 
Xie using domain and IP address rules, as taught in Balasubramanian, in order to control access 
to specific areas in web space as taught by Balasubramanian (0016]). Xie does not disclose 
dynamically generated rules when it is determined that packet denial is greater than a desired 
threshold amount. Chelsa discloses maintaining a frequency for the number of occurances with 
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which messages were rejected ([0017]). It would have been obvious to one of ordinary skill in 
the art to dynamically generate exceptions for the dynamic filter of Xie based on a desired 
amount of allowable packets in order to minimize the blocking of legitimate traffic as taught be 
Chelsa([0017]). 

Referring to claims 2, 3, 11, 12, 19, 20, 27, 28, 35, 36, Xie discloses that the packets are 
initially denied based on counter rules that increment the count until a threshold is exceeded 
(Col 5, lines 10-15), which meets the limitation of constraints selected with a frequency 
exceeding a threshold and having no children with a frequency above the threshold. Xie 
discloses filtering packets using rules based on port number and IP address (Col. 5, lines 58-60), 
but does not specify filtering based on URLs and URL descendants. Balasubramanian discloses a 
rule based filtering system where URL requests are filtered at the domain and IP address level, 
based on rules, to allow/deny traffic for all domains beginning with identified IP address 
information ([0056] & [0065]-[0067]), which meets the limitation of the function is an aggregate 
of a number of occurances with which the URL component was rejected by a rule and the 
number of occurrences with which descendants of the URL component were rejected by the rule. 
It would have been obvious to one of ordinary skill in the art at the time the invention was made 
to dynamically filter the packets of Xie using domain and IP address rules, as taught in 
Balasubramanian, in order to control access to specific areas in web space as taught by 
Balasubramanian (0016]). 

Referring to claims 5, 13, 21, 30, 37, Xie discloses that the packets are initially denied 
based on counter rules that increment the count until a threshold is exceeded (Col. 5, lines 10- 
15). The dynamic filter, filters the initially denied packets using an additional set of rules, which 
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are dynamically generated (CoL 5, lines 50-52). Balasubramanian discloses a rule based filtering 
system where URL requests are filtered at the domain and IP address level, based on rules, to 
allow/deny traffic for all domains beginning with identified IP address information ([0056] & 
[0065]-[0067]). Xie does not disclose dynamically generated rules when it is determined that 
packet denial is greater than a desired threshold amount. It would have been obvious to one of 
ordinary skill in the art to dynamically generate exceptions for the dynamic filter of Xie based on 
a desired amount of allowable packets in order to minimize the blocking of legitimate traffic as 
taught be Chelsa ([0017]). 

Referring to claims 7, 8, 15, 16, 23, 24, 39, 40, Xie discloses that the packets are initially 
denied based on counter rules that increment the count until a threshold is exceeded (Col. 5, lines 
10-15), which meets the limitation of the frequency is a weighted/direct count of occurrences of 
the component. Xie discloses filtering packets using rules based on port number and IP address 
(Col. 5, lines 58-60), but does not specify filtering based on URLs and URL descendants. 
Balasubramanian discloses a rule based filtering system where URL requests are filtered at the 
domain and IP address level, based on rules, to allow/deny traffic for all domains beginning with 
identified IP address information ([0056] & [0065]-[0067]), which meets the limitation of the 
function is an aggregate of a number of occurances with which the URL component was rejected 
by a rule and the number of occurrences with which descendants of the URL component were 
rejected by the rule. It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to dynamically filter the packets of Xie using domain and IP address rules, 
as taught in Balasubramanian, in order to control access to specific areas in web space as taught 
by Balasubramanian (0016]). 
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Conclusion 



8. 



Any inquiry concerning this communication or earlier communications from the 



examiner should be directed to Benjamin E. Lanier whose telephone number is 571-272-3805. 
The examiner can normally be reached on M-Th 6:00am-4:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




BenjHrmn E^>Lanr 
Primary Examine 



